General

  • Target

    548-83-0x000000000041F120-mapping.dmp

  • Size

    369KB

  • MD5

    2316ae4669242ca137c869c58f7365b8

  • SHA1

    f0c4d4a2962cfebbb74d54e467cd7e6c5d34e2bd

  • SHA256

    122af7d578f0e640e9cd7d252f91135526eee9704de432611d267cc35f811f8e

  • SHA512

    68fd07550b28003cd382cbcc1a242edac22b9bfcc9e5c3b8744aab8d5421159459033ff86f14d33084cc6be87a1b7cab6018579f26f1506ec782792ea3486c1f

  • SSDEEP

    6144:C2M6cVsXcKaZ27FEYIIJTy9Un2M6cVsXcKaZ27FEYIIJTy9UQ:CacVEFIR90acVEFIR9t

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

s14s

Decoy

bizimadak.com

canadaroi.com

renaissancerecords.online

winemilf.com

aag-appraisal.com

cactusvikingllc.com

ericgacor.cyou

go-official.link

radiotop20.com

gruenebande.com

dg-yingsheng.com

inv.page

ruibang.biz

webcolik.com

oakbaysaas.com

gracedevelop.site

recoveringcoaches.com

flagincluded.com

corporatefolio.com

thai-nuaddee.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 548-83-0x000000000041F120-mapping.dmp